# LarkAI 0.44 — verified QA scope

2026-10-18. All 121 backend tests pass from the exported source. 203 DOM assertions pass with no DOM errors; 12 layout-only assertions are explicitly skipped in jsdom. New regressions cover sidebar title removal/accessibility, navigation across eight spaces clearing stale warnings, bounded notification lifetime, delayed API/native errors after navigation, prior-session error suppression, inline encryption errors, Cue-only protocol controls after Cue Encrypt, hiding after ordinary draft/provider/view/lock changes, corrected capitalization and native default-browser status/fallback UI.

Actual browser QA used fictional member/game data and the real app UI source. Translate has no key/protocol panel; Cue Encrypt reveals it inside Cue, leaving Cue hides it, and the global status is empty/display:none on other screens. Cue protocol controls, Connection & Privacy and Settings controls were visually inspected. Screenshots are included in qa. No actual member vault or personal media was opened.

Swift native app and fixtures compile. Existing service reload, session cache, menu/security structure and Compass centralized/new-tab preservation checks pass. The new default-browser controller fixture verifies registration before HTTPS/HTTP requests, both-handler confirmation, already-default idempotence, rejected consent, registration error, partial change, error-free callbacks that did not apply a change, duplicate requests and unpackaged-app handling. These tests use injected OS adapters and do not change the user's current browser. Real macOS confirmation after installing the new app remains a manual device check. Existing benign dynamic Redo selector and nested-sandbox LaunchServices/font warnings remain in compiler/fixture logs; assertions pass.

Real native CryptoKit roundtrip/security fixtures continue to pass: wrong recipient, tampering, same-name/different keys, key-pin replacement boundaries, sender-copy access, owner-bound drafts, native readdressing, sender-only authorization and isolation from a previous recipient. This is not an independent protocol audit or invulnerability certification. No encryption keys enter AI or Cue plaintext storage.

HTTP authorization/storage tests isolate the media signature probe with a mock because nested sandbox media-probe execution remains limited. Live GPU inference, microphone/camera, external accounts/APIs, remote two-Mac Cue interoperability, actual default-browser consent and blockchain settlement are not certified by this suite. Agon network publication remains disabled pending the receiving wallet and trusted payment/distribution backend; no tokens are charged. The iPhone design source is a browser prototype, not a native iOS app.

The staged app is ad-hoc signed and strictly verified. The installer is unsigned/unnotarized and has not been installed over the user's app. Prior installers are retained for rollback. The source archive includes dependency inventories, license notices, integration notes, tests, website and iPhone design source, excluding vaults, user databases, keys, sessions, credentials, runtime/model binaries and test caches. See source/installer verification JSON and checksums.